Lucene search

DellCVE-2022-26856

HistoryApr 21, 2022 - 9:15 p.m.

CVE-2022-26856

2022-04-2121:15:07

CWE-522

dell

web.nvd.nist.gov

dell emc

repository manager

vulnerability

cve-2022-26856

plain-text password

local attacker

user credentials

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application’s database with privileges of the compromised account.

Affected configurations

Nvd

Node

dellemc_repository_managerMatch3.4.0

VendorProductVersionCPE
dellemc_repository_manager3.4.0cpe:2.3:a:dell:emc_repository_manager:3.4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	emc_repository_manager	3.4.0	cpe:2.3:a:dell:emc_repository_manager:3.4.0:::::::*

CNA Affected

[
  {
    "product": "Dell Repository Manager (DRM)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "DRM 3.4.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/000197797

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-26856